full-disclosure - Re: A Botted Fortune 500 a Day

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 17 Apr 2007 16:59:03 -0700
From: Troy <gimmespam@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: A Botted Fortune 500 a Day

On 4/17/07, Nick FitzGerald <nick@...us-l.demon.co.uk> wrote:
>
> SI is, however, showing that at least some F500s
> have lazy arse/stupid/otherwise incompetent admins and/or oversight
> procedures and/or policies driving the whole mess of their IT systems,
> and as a result the rest of us pay for their incompetence.

I've worked in a large corporate environment. I don't think it's a matter of
the admins being lazy or incompetent. It's more a matter of corporate
politics. The admins roll out a policy that locks down all workstations,
prohibits the installation of unapproved software, and prevents visiting
restricted web sites, and all is well. Then, Melllvar, the CEO's nephew in
accounting, complains that he can't play World of Star Trek. The CEO comes
down on the IT department, and the admins either lose their jobs or open a
few holes for Melllvar, who promptly installs a "crack" for his game,
unleashing a bot on the local LAN.

-- 
Troy

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/